CVE-2014-0122

CVE-2014-0122 describes an access restriction bypass vulnerability in Moodle versions through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2. The flaw in mod/chat/chat_ajax.php allows authenticated users to remain in a chat session and bypass intended access restrictions even after an administrator removes their chat capability. With a CVSS score of 4.9, this vulnerability is of medium severity, requiring authenticated access and medium attack complexity. A successful exploit could lead to partial confidentiality and integrity impacts, as unauthorized users could continue participating in chat sessions. There is no evidence of active exploitation, nor are there any known public exploit codes available through platforms like Metasploit or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.